Maersk Confirms Data Theft as WhiteArmor Demands $5 Million
November 12, 2026
Maersk confirmed unauthorized access to a legacy system from an acquisition, while the WhiteArmor ransomware group claims 100 GB of
Cybersecurity
Maersk Confirms Data Theft as WhiteArmor Demands $5 Million
Maersk confirmed unauthorized access to a legacy system from an acquisition, while the WhiteArmor ransomware group claims 100 GB of stolen logistics data.
Attackers Hijack ScreenConnect at MSPs as ConnectWise Cuts Extensions
Huntress says attackers abused ScreenConnect Run Command at MSPs to push rogue clients and the SCKit toolkit; ConnectWise disabled five extensions at partners.
wfx-loot Campaign Used 4,837 Hijacked GitHub Accounts for CI Stealer
Aikido Security says the wfx-loot campaign used 4,837 stolen GitHub accounts to plant a CI secret stealer that ran in at least 1,806 repositories so ...
Apache 2.4.71 Fixes Critical mod_http2 RCE Flaw CVE-2026-119618
Apache HTTP Server 2.4.71 fixes CVE-2026-119618, a critical mod_http2 race condition rated CVSS 9.8 by Red Hat; Red Hat and Wiz disagree on exploit status.
Critical MongoDB Flaw CVE-2026-118383 Crashes Replica Set Members
Datadog Security Labs details CVE-2026-118383, a CVSS 4.0 9.5 MongoDB use-after-free that lets unauthenticated attackers crash replica set members remotely.
Node.js Security Releases Fix HTTP/2 Crash and TLS Memory Leaks
Node.js 22.23.5, 24.22.3 and 26.13.1 fix up to 17 flaws, including HTTP/2 crashes and memory leaks that can expose TLS private keys, with no workaround.
Poland Takes ePUAP E-Government Platform Offline After Cyberattack
Poland disabled its ePUAP e-government platform after a detected cyberattack; Trusted Profile digital ID signing may be affected and no restoration date is set.
AntiFox AI Pentest Platform Abused to Steal AWS Production Secrets
Arctic Wolf Labs links the AntiFox agentic pentest platform to attacks on IIS web apps and AWS environments that exposed production secrets and deleted S3 ...
Researchers Unmask Qilin Ransomware Administrator ‘Haise’
KrebsOnSecurity, using Intel 471, Flashpoint and IntelHawk data, identifies Qilin administrator Haise as a 36-year-old St. Petersburg man; no charges announced.
Critical Red Hat Quay Flaw CVE-2026-123710 Allows Signing Takeover
Red Hat Quay flaw CVE-2026-123710, rated CVSS 9.8, lets attackers install a trusted signing key and read or overwrite any repository; fixes are merged upstream.
Attackers Hijack ScreenConnect at MSPs as ConnectWise Cuts Extensions
November 12, 2026
Huntress says attackers abused ScreenConnect Run Command at MSPs to push rogue clients and the SCKit toolkit; ConnectWise disabled five
wfx-loot Campaign Used 4,837 Hijacked GitHub Accounts for CI Stealer
November 12, 2026
Aikido Security says the wfx-loot campaign used 4,837 stolen GitHub accounts to plant a CI secret stealer that ran in
Apache 2.4.71 Fixes Critical mod_http2 RCE Flaw CVE-2026-119618
November 12, 2026
Apache HTTP Server 2.4.71 fixes CVE-2026-119618, a critical mod_http2 race condition rated CVSS 9.8 by Red Hat; Red Hat and
Critical MongoDB Flaw CVE-2026-118383 Crashes Replica Set Members
November 12, 2026
Datadog Security Labs details CVE-2026-118383, a CVSS 4.0 9.5 MongoDB use-after-free that lets unauthenticated attackers crash replica set members remotely.
Node.js Security Releases Fix HTTP/2 Crash and TLS Memory Leaks
November 12, 2026
Node.js 22.23.5, 24.22.3 and 26.13.1 fix up to 17 flaws, including HTTP/2 crashes and memory leaks that can expose TLS
Poland Takes ePUAP E-Government Platform Offline After Cyberattack
November 12, 2026
Poland disabled its ePUAP e-government platform after a detected cyberattack; Trusted Profile digital ID signing may be affected and no
AntiFox AI Pentest Platform Abused to Steal AWS Production Secrets
November 12, 2026
Arctic Wolf Labs links the AntiFox agentic pentest platform to attacks on IIS web apps and AWS environments that exposed
Researchers Unmask Qilin Ransomware Administrator ‘Haise’
November 12, 2026
KrebsOnSecurity, using Intel 471, Flashpoint and IntelHawk data, identifies Qilin administrator Haise as a 36-year-old St. Petersburg man; no charges
Critical Red Hat Quay Flaw CVE-2026-123710 Allows Signing Takeover
November 12, 2026
Red Hat Quay flaw CVE-2026-123710, rated CVSS 9.8, lets attackers install a trusted signing key and read or overwrite any
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.